Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/z_dT6nkhGjINS_F5mg5a7v5MXEM.roa
File: z_dT6nkhGjINS_F5mg5a7v5MXEM.roa (raw, json)
Hash identifier: iV1nv/0On7ohCIZpXDSi1vHV4Tzf0uXM1nsIQGMwyLw=
Subject key identifier: CF:F7:53:EA:79:21:1A:32:0D:4B:F1:79:9A:0E:5A:EE:FE:4C:5C:43
Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial: 01914A77EFA0B5FC77219C6A6B7FB062539E
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/z_dT6nkhGjINS_F5mg5a7v5MXEM.roa
Signing time: Tue 13 Aug 2024 06:40:59 +0000
ROA not before: Tue 13 Aug 2024 06:40:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42705
IP address blocks: 185.243.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:77:ef:a0:b5:fc:77:21:9c:6a:6b:7f:b0:62:53:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
Validity
Not Before: Aug 13 06:40:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cff753ea79211a320d4bf1799a0e5aeefe4c5c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:01:80:3f:d6:88:24:55:6a:49:2f:66:d6:
88:65:ba:66:08:da:b4:32:44:7f:4b:23:f9:e3:4b:
50:1a:81:ae:1b:fd:fc:01:ea:85:d0:30:bf:49:29:
d3:41:7e:ef:37:0d:b2:a2:fa:f3:69:be:bc:30:2c:
36:1a:cc:01:fc:1f:42:22:94:e3:12:16:ec:1e:e3:
10:44:f1:95:3b:52:b4:a5:dd:71:fe:ab:de:eb:63:
4c:75:fe:9f:9a:3f:0e:e5:e6:3f:67:d7:d1:d5:cb:
ac:8c:cd:b3:2e:29:12:1e:6b:44:0d:c5:37:7c:39:
39:6b:6d:e1:eb:79:1d:61:02:75:36:a8:08:3d:45:
bd:c4:d9:22:b2:9c:fa:d8:84:21:f2:b5:0d:59:f3:
82:26:28:b7:80:a1:a0:6a:60:2f:df:aa:f7:c0:07:
2c:8a:b8:2f:35:3b:98:8f:41:27:8a:66:02:6c:29:
a8:44:e5:2d:99:34:c5:fd:cc:58:4e:c0:59:57:9b:
c9:a4:28:7f:ed:d5:e4:4b:55:a3:b9:d4:81:36:51:
49:c9:9f:85:9a:01:6a:34:9c:d0:48:db:3d:ec:83:
f5:6e:e7:9a:02:4e:11:6b:e8:ba:bb:56:e9:c4:a6:
8b:3d:9b:3c:a9:bd:3b:95:ea:1b:b7:96:c6:17:17:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:53:EA:79:21:1A:32:0D:4B:F1:79:9A:0E:5A:EE:FE:4C:5C:43
X509v3 Authority Key Identifier:
keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/z_dT6nkhGjINS_F5mg5a7v5MXEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.128.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b2:b7:59:bb:01:74:cb:3c:7d:78:b0:ad:6a:d1:89:2d:ba:
b8:d9:19:ec:9d:82:3b:1c:8a:78:ca:d3:eb:a8:ad:bc:df:5e:
f0:17:0f:7d:ca:a2:3a:b6:40:1c:a4:83:51:b8:e7:bd:ea:d2:
36:16:a2:07:34:a4:7b:53:2b:00:6a:cc:da:51:19:df:36:52:
17:b9:9f:53:47:6e:e1:23:8b:4e:bc:b9:61:d0:db:ce:05:54:
99:cc:71:e0:db:f5:ca:50:38:a6:0c:43:cd:b4:32:f3:cd:cc:
54:b6:19:f9:8d:28:df:ba:da:aa:28:4f:8f:09:5d:70:52:14:
fe:1e:88:fc:d5:14:d1:5c:1d:ca:16:5c:86:57:fe:d4:9e:66:
96:31:44:00:7e:d0:27:cc:99:9b:ad:78:bf:79:6b:48:bb:5d:
8c:6b:e3:bf:d4:d7:6c:e7:59:1c:08:f9:f1:e9:76:0a:3b:20:
2d:d0:bc:48:f6:32:21:b0:4a:d2:bd:43:1e:cc:9b:af:6f:5c:
e1:86:6d:05:3b:0b:46:ab:59:f8:1d:16:cd:22:b0:ef:ca:72:
53:0b:ae:70:f9:95:ed:83:e9:82:a1:4e:e7:62:50:00:57:2d:
1b:88:e6:29:73:ff:81:b8:de:3c:7f:4c:d0:81:02:e6:5d:46:
48:e2:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:05 2024 by rpki-client on console-ams.rpki-client.org